> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Import certificate

> Switch the signer to the certificate already issued in an existing DigiCert order, signing with that certificate's private key on the HSM. DigiCert does not reissue or revoke anything.



## OpenAPI

````yaml POST /api/v1/cert-manager/signers/{signerId}/certificate/import
openapi: 3.0.3
info:
  title: Infisical API
  description: List of all available APIs that can be consumed
  version: 0.0.1
servers:
  - url: https://us.infisical.com
    description: Production server (US)
  - url: https://eu.infisical.com
    description: Production server (EU)
  - url: http://localhost:8080
    description: Local server
security: []
paths:
  /api/v1/cert-manager/signers/{signerId}/certificate/import:
    post:
      tags:
        - PKI Signers
      description: >-
        Switch the signer to the certificate already issued in an existing
        DigiCert order, signing with that certificate's private key on the HSM.
        DigiCert does not reissue or revoke anything.
      operationId: importSignerCertificate
      parameters:
        - schema:
            type: string
            format: uuid
          in: path
          name: signerId
          required: true
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                caId:
                  type: string
                  format: uuid
                  description: The DigiCert certificate authority the order belongs to.
                externalOrderId:
                  type: string
                  minLength: 1
                  maxLength: 32
                  description: The DigiCert order whose certificate the signer will use.
                certificate:
                  type: object
                  properties:
                    hsmConnectorId:
                      type: string
                      format: uuid
                    hsmKeyLabel:
                      type: string
                      minLength: 1
                      maxLength: 128
                    hsmKeyId:
                      type: string
                      minLength: 2
                      maxLength: 256
                      pattern: ^(?:[0-9a-fA-F]{2})+$
                      description: >-
                        The hex-encoded PKCS#11 key ID (CKA_ID) of the private
                        key, used to tell apart keys that share a label. Only
                        used with hsmKeyLabel.
                  required:
                    - hsmConnectorId
                    - hsmKeyLabel
                  additionalProperties: false
                certificateRenewBeforeDays:
                  type: integer
                  minimum: 1
                  maximum: 30
                  nullable: true
                  description: >-
                    Days before expiry to renew the certificate with the same
                    HSM key. Must be less than the certificate's validity. Omit
                    to keep the signer's current setting, or set to null to turn
                    renewal off.
              required:
                - caId
                - externalOrderId
                - certificate
              additionalProperties: false
      responses:
        '200':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  id:
                    type: string
                    format: uuid
                  name:
                    type: string
                  description:
                    type: string
                    nullable: true
                  status:
                    type: string
                    default: active
                  certificateId:
                    type: string
                    format: uuid
                    nullable: true
                  approvalPolicyId:
                    type: string
                    format: uuid
                    nullable: true
                  lastSignedAt:
                    type: string
                    format: date-time
                    nullable: true
                  createdAt:
                    type: string
                    format: date-time
                  updatedAt:
                    type: string
                    format: date-time
                  caId:
                    type: string
                    format: uuid
                    nullable: true
                  commonName:
                    type: string
                    nullable: true
                  certificateTtlDays:
                    type: number
                    nullable: true
                  certificateRenewBeforeDays:
                    type: number
                    nullable: true
                  certificateFailureReason:
                    type: string
                    nullable: true
                  keyAlgorithm:
                    type: string
                    default: RSA_2048
                  externalCaConfig:
                    nullable: true
                required:
                  - id
                  - name
                  - createdAt
                  - updatedAt
                additionalProperties: false
        '400':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 400
                  message:
                    type: string
                  error:
                    type: string
                  details: {}
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '401':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 401
                  message:
                    type: string
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '403':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 403
                  message:
                    type: string
                  details: {}
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '404':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 404
                  message:
                    type: string
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '422':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 422
                  message: {}
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - error
                additionalProperties: false
        '500':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 500
                  message:
                    type: string
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.